drp.bcsc.bc.ca

- British Columbia Securities Commission -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:23:9f:ed was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

British Columbia Securities Commission

Organization: British Columbia Securities Commission
State / Province: British Columbia
Locality: Vancouver
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:23:9f:ed
Serial Number (int): 1277403117
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: f5:86:8e:48:44:15:e0:80:d1:99:f0:1e:a6:4c:79:a2:0b:7d:b4:b1
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): f2:d0:ed:a6:b9:f4:7b:52:8d:f6:f3:79:74:ba:bc:8d:bd:ba:4b:2f
Fingerprint (sha256): 7b:2a:b0:28:a5:27:02:cd:d1:49:6d:55:e3:e7:68:76:96:26:b9:cb:7e:29:9b:61:cd:d9:c2:db:b3:c5:08:91

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate drp.bcsc.bc.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for drp.bcsc.bc.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

drp.bcsc.bc.ca

Other certificates including the domain name bcsc.bc.ca

(limited to 100 certificates)
pcuimp02i.bcscnet.ca
si.qa.bcsc.bc.ca
www.bcsc.bc.ca
uat.bcsc.bc.ca
ereports.bcsc.bc.ca
qaewebservices.bcsc.bc.ca
qaeservices.bcsc.bc.ca
nqaereports.bcsc.bc.ca
qasedarplus.bcsc.bc.ca
qaereports.bcsc.bc.ca
nuateservices.bcsc.bc.ca
gateway.dev.bcsc.bc.ca
webmail.bcsc.bc.ca
dev.bcsc.bc.ca
webfile.bcsc.bc.ca
deveservices.bcsc.bc.ca
webmail.bcsc.bc.ca
eservices.bcsc.bc.ca
cd.uat.bcsc.bc.ca
uatewebservices.bcsc.bc.ca
ewebservices.bcsc.bc.ca
nqaewebservices.bcsc.bc.ca
prodsedarplus.bcsc.bc.ca
webvdidr.bcsc.bc.ca
ndev.bcsc.bc.ca
webmail.bcsc.bc.ca
*.bcsc.bc.ca
cd.qa.bcsc.bc.ca
ereports.bcsc.bc.ca
uatereports.bcsc.bc.ca
gateway.bcsc.bc.ca
deveservices.bcsc.bc.ca
qaeservices.bcsc.bc.ca
dev.bcsc.bc.ca
connect.bcsc.bc.ca
webmail.bcsc.bc.ca
webfile.bcsc.bc.ca
uatereports.bcsc.bc.ca
qaereports.bcsc.bc.ca
nqa.bcsc.bc.ca
eservices.bcsc.bc.ca
lucerne2008.bcsc.bc.ca
connect.bcsc.bc.ca
eservices.bcsc.bc.ca
dapp01e.bcsc.bc.ca
pcuimp02i.bcscnet.ca
webmail.bcsc.bc.ca
qaereports.bcsc.bc.ca
eservices.bcsc.bc.ca
devEservices.bcsc.bc.ca
qaewebservices.bcsc.bc.ca
devPlanning10.bcsc.bc.ca
ndevereports.bcsc.bc.ca
new.bcsc.bc.ca
ndeveservices.bcsc.bc.ca
devsedarplus.bcsc.bc.ca
nuat.bcsc.bc.ca
devereports.bcsc.bc.ca
www.bcsc.bc.ca
eservices.bcsc.bc.ca
qa.bcsc.bc.ca
awseg.bcsc.bc.ca
qaewebservices.bcsc.bc.ca
gateway.uat.bcsc.bc.ca
uatewebservices.bcsc.bc.ca
surveys.bcsc.bc.ca
eservices.bcsc.bc.ca
planning10.bcsc.bc.ca
*.bcsc.bc.ca
oliver2008.bcsc.bc.ca
qaeservices.bcsc.bc.ca
webmail.bcsc.bc.ca
nuatwebservices.bcsc.bc.ca
ProdTableau.bcsc.bc.ca
si.bcsc.bc.ca
devereports.bcsc.bc.ca
connect.bcsc.bc.ca
drp.bcsc.bc.ca
webmail.bcsc.bc.ca
cm.uat.bcsc.bc.ca
www.bcsc.bc.ca
devewebservices.bcsc.bc.ca
webfile.bcsc.bc.ca
ewebservices.bcsc.bc.ca
eservices.bcsc.bc.ca
bcsc.bc.ca
nqaeservices.bcsc.bc.ca
gateway.qa.bcsc.bc.ca
eservices.bcsc.bc.ca
ndevewebservices.bcsc.bc.ca
webfile.bcsc.bc.ca
eservices.bcsc.bc.ca
uateservices.bcsc.bc.ca
bcscadobesync.bcsc.bc.ca
cm.dev.bcsc.bc.ca
maintenance.bcsc.bc.ca
nuatereports.bcsc.bc.ca
nconnect.bcsc.bc.ca
ndrconnect.bcsc.bc.ca
*.bcsc.bc.ca

Certificate

The complete raw certificate details for drp.bcsc.bc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvODf5ppp+OIEsPKZqrwq
9NenUet/RGhL3mNzbD8WVXdlARVUC+qe7wjFg8v0ISd296+Ou1Lk0Fd2VHDknxtv
AaYuz/N1PLPk+8eIols1GxbarrYKtsI8wEK5Z5NO/E9nn/9nqnGWU8KoHo7NL6eM
MCxt7CiqPWV6uiAsmeQkls8KU9Kd4hSLGQ8PKyH1r2ACqLCqhTfpQ+eA10cwWHXR
tVVwdy9QIArEk4KRlJGk93kgg1Lg08T0pmPQomIVBfQxOIUkHKu61ZWgOeueTA7F
+yHo8As7y2R3S0J+9F5XR/K0S/VyA5eO6RqoNzegyooCEj8lQdR+cochfPK+kNCG
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277403117
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-15 16:37:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-06 04:12:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vancouver'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Columbia Securities Commission'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'drp.bcsc.bc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23843691137950184247319828365654302386275912302316273570293532423502059457766544309540961013042532134965015378169756845985307504324983520171368905068601650063982064045507666959566078820358401945095303003922343158895897924066181405281025440303101609422258769499041676005586604222318854666535620298562114125577952827443591876055018444294414418387159380743759464950603618770941376454399969485403009966969643819078933850808329291783282696273077907339597274648276291860274035225811644941722255507513965157882721020741821156463582504907203436626652840162711790782642288276581633420042426244970335878676106305108339684574763
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drp.bcsc.bc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f5868e484415e080d199f01ea64c79a20b7db4b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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